CVE-2015-9468

概要

参考情報

• cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html · Third Party Advisory
• wordpress.org/plugins/broken-link-manager · Release Notes

broken link manager のその他の脆弱性

• CVE-2015-9467緊急 9.8The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
• CVE-2015-9453中 6.1The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.